acl

Documentation

Index

• Constants
• Variables
• func ACLToStatement(acl model.ACL) (model.Statements, error)
• func IsPolicyName(policyName string) bool
• func PolicyName(groupID string) string
• func WriteGroupACL(ctx context.Context, svc auth.Service, groupName string, acl model.ACL, ...) error

Constants

const (
	// ReadPermission allows reading the specified repositories, as well as
	// managing own credentials.
	ReadPermission model.ACLPermission = "Read"
	// WritePermission allows reading and writing the specified repositories,
	// as well as managing own credentials.
	WritePermission model.ACLPermission = "Write"
	// SuperPermission allows reading, writing, and all other actions on the
	// specified repositories, as well as managing own credentials.
	SuperPermission model.ACLPermission = "Super"
	// AdminPermission allows all operations, including all reading, writing,
	// and all other actions on all repositories, and managing
	// authorization and credentials of all users.
	AdminPermission model.ACLPermission = "Admin"
)

const (
	AdminsGroup  = "Admins"
	SupersGroup  = "Supers"
	WritersGroup = "Writers"
	ReadersGroup = "Readers"
)

const PolicyPrefix = "ACL(_-_)"

Variables

var (
	ErrBadACLPermission = fmt.Errorf("%w: Bad ACL permission", model.ErrValidationError)
)

Functions

func ACLToStatement

func ACLToStatement(acl model.ACL) (model.Statements, error)

func IsPolicyName

func IsPolicyName(policyName string) bool

func PolicyName

func PolicyName(groupID string) string

PolicyName returns the policy identifier for the ACL for groupID.

func WriteGroupACL

func WriteGroupACL(ctx context.Context, svc auth.Service, groupName string, acl model.ACL, creationTime time.Time, warnIfCreate bool) error